# Under-provisioned countries?

**URL:** <https://community.ntppool.org/t/under-provisioned-countries/3727>\
**Category:** Server operators\
**Created:** [January 4, 2025, 11:21am UTC](https://community.ntppool.org/t/under-provisioned-countries/3727 "2025-01-04T11:21:45Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![Sebhoster](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@Sebhoster](https://community.ntppool.org/u/Sebhoster)\
**Post date:** [January 7, 2025, 8:43pm UTC](https://community.ntppool.org/t/under-provisioned-countries/3727/12 "2025-01-07T20:43:37Z")

</div>

> [@gombadi](#):
>
> Recently I have been seeing a lot of requests from (I think mostly to - think DDoS) a Philippines ISP. I am seeing about 2.6 (up to 5.2) million requests per hour form/to a single ip address. I recently added rate limiting to Chrony to see what it would do. Would be interested to know if you are seeing similar things.

I had a virtual server in the Phillipines with Lightnode that was also constantly under load with upwards of thousands of requests per second from some IPs. The requests had strange patterns in them and came mostly from residential IP address blocks. I think those were probably caused by a broken NTP implementation on some device, but I was not motivated enough to investigate further. The topic was discussed here: [Certain servers are not replying - #20 by Sebhoster](https://community.ntppool.org/t/certain-servers-are-not-replying/3238/20)

---

_[View the full topic](https://community.ntppool.org/t/under-provisioned-countries/3727)._
